Associate Web Application Security Specialist: Become the Newest Member of the VF Family

　　As a member of the Application Security team, you will be a key member of the team looking across the VF Global enterprise looking for threats and vulnerabilities that would potentially or unnecessarily place the company at risk.

　　Working with the different teams within VF, you will communicate and oversee Dynamic Application Security Testing findings to the key stakeholders, evaluate and prioritize key vulnerabilities and intersect with the risk functional team within cyber and information security. Responsibilities will include oversight of remediation efforts within VF.

　　How You Will Make a Difference:

　　Serve as a subject matter expert for application development and infrastructure teams

　　Oversee the Dynamic Application Security Testing from the technical perspective

　　Partner with application development teams for secure development process adoption and continuous security posture improvement

　　Determine and define project scope, objectives, and deliverable for large-scale application security project

　　Identify metrics and Key Performance Indicators (KPIs) for Dynamic Application Security Testing program

　　Support authorized penetration testing on enterprise network assets as needed

　　Assist with performing end-to-end application security reviews to ensure critical information is appropriately protected

　　Participate in the creation of effective and efficient processes to drive successful reduction of risk within VF

　　Assist in the design of more secure pipelines and update existing ones

　　Research and advocate for new security solutions and technologies

　　Ensuring the highest levels of security practices are maintained by VF through projects, implementations

　　Establish communications with associates related to threats, vulnerabilities, processes and security risks across a global landscape

　　Escalate as necessary high or critical risks, threats or vulnerabilities to the proper channels for resolution

　　Advocate and evangelize the importance of Threat and Vulnerability management within VF and socialize through internal channels

　　Years of Related Professional Experience: 1-3 years

　　Position Requirements:

　　Have experience with IT Security, Risk Management, or IT Auditing

　　Expert knowledge of vulnerabilities as presented on the OWASP top 10

　　Extensive experience with agile delivery practices

　　Extensive experience integrating security into DevOps practices

　　Understanding of networking protocols (IP, DNS, HTTP)

　　Extensive experience conducting source code review

　　Experience using static application security testing tools such as Invicti, Checkmarx, Veracode, etc.

　　Experience dynamic analysis with tools such as AppScan, Invicti, Qualys WAS, BurpSuite, and OWASP ZAP, etc.

　　Experience in Web Application and/or Cloud penetration testing.

　　Familiarity with common enterprise architectures.

　　Experience auditing and configuring Akamai security products (WAF, BMP, etc.).

　　Excellent organizational and communication skills.

　　Demonstrated ability to work independently and with others

　　Follows all defined IT standards and processes (i.e. IT Governance, SM&G, Architecture, etc.), and provides input for improvements to the appropriate process owners as needed

　　Maintains a proper balance between business and operational risk

　　Follows the defined project management standards and processes

　　Educational Preferences:

　　A bachelor’s or master’s degree in computer science, information systems or other related field; or equivalent work experience

　　Relevant certifications (CISSP, CSSLP, OSCP, OSWE, eWPT, GWEB, etc.)

　　Special Physical and/or Mental Requirements:

　　Travel by air and overnight, as required 10% amount of time.Hiring Range :

　　$72,000.00 USD - $90,000.00 USD annually

　　Incentive Potential : This position is eligible for additional compensation awards that may include an annual incentive plan, sales incentive, or commission potential. Specific details of the additional compensation eligibility for this position will be provided during the recruiting and interview process.

　　Benefits at VF Corporation : You can review a general overview of each benefit program offered, including this year's medical plan rates on www.MyVFbenefits.com and by clicking Looking to Join VF? Detailed information on your benefits will be provided during the hiring process.

　　P lease note, our hiring ranges are determined and built from market pay data. In determining the specific compensation for this position, we comply with all local, state, and federal laws.

　　At VF, we value a diverse, inclusive workforce and we provide equal employment opportunity for all applicants and employees. All qualified applicants for employment will be considered without regard to an individual’s race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws. If you are unable to submit your application because of incompatible assistive technology or a disability, please contact us at [email protected] . VF will reasonably accommodate qualified individuals with disabilities to the extent required by applicable law.

　　Pursuant to all applicable local Fair Chance Ordinance requirements, including but not limited to the San Francisco Fair Chance Ordinance, VF will consider for employment qualified applicants with arrest and conviction records.

　　VF Diversity Vision StatementVF is committed to creating an inclusive environment that welcomes and values the differences among all of our associates, customers, suppliers and the communities in which we live and conduct business. The continued success and growth of VF is enhanced through initiatives that promote diversity throughout VF around the world.VF is an equal employment opportunity/ affirmative action employer of minorities, females, protected veterans and the disabled. VF is committed to providing equal opportunities in employment, and treating our VF associates and VF applicants without discrimination on the basis of their race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, protected veteran status, HIV/AIDS status, or any other legally protected factor.